General
- Target destroer.bat
- Size 2KB
- Sample260905-k6yb4a1dra
- SHA256 8093746fc13483ebd1b84c82a36ee9de6a55ba9a3983b94bb6a8232cb7797a75
- MD5 3dc645f81c6c48062a6fd27dd7787123
- SHA1 c11620880a89fb442b85fc84949b3199efcdfebe
- SHA512 c4a947cee0609b6d25e273fdeac5184c7dd0aa5c05f1d5ddad00b61b3f50dff99dac969b159bf494281a31a829f54dd412cd597a99b5d99026218db16fdddff6
- TLSH T18051241479E183B15B024436FB4FB122FB34A58BD8C42050725768F6988D87841FBFDE
- MD5 SHA1 SHA512 TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
destroer.bat
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target destroer.bat
- Size 2KB
- SHA256 8093746fc13483ebd1b84c82a36ee9de6a55ba9a3983b94bb6a8232cb7797a75
- MD5 3dc645f81c6c48062a6fd27dd7787123
- SHA1 c11620880a89fb442b85fc84949b3199efcdfebe
- SHA512 c4a947cee0609b6d25e273fdeac5184c7dd0aa5c05f1d5ddad00b61b3f50dff99dac969b159bf494281a31a829f54dd412cd597a99b5d99026218db16fdddff6
- TLSH T18051241479E183B15B024436FB4FB122FB34A58BD8C42050725768F6988D87841FBFDE
- MD5 SHA1 SHA512 TLSH
Score8/10-
Drops file in Drivers directory
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
Modifies termsrv.dll
Commonly used to allow simultaneous RDP sessions.